CVE-2021-22941
Citrix ShareFile Improper Access Control Vulnerability
Published Sep 23, 2021 · updated Jun 16, 2026 · citrix sharefile storagezones controller
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Timeline
Detection, updates, and resolution for this record.
Sep 23, 2021 · Catalog
Detected
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Mar 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Required action
Apply updates per vendor instructions.
CISA due date Apr 15, 2022
Affected
- cpe citrix/sharefile storagezones controllerversion unspecified
- vendor Citrix ShareFileversion unspecified
Sources
- CISA KEVCVE-2021-22941
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.
cisa.gov - CVE.orgCVE-2021-22941
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-22941
30-day exploitation probability 53.6%
first.org - NIST NVDCVE-2021-22941
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
nvd.nist.gov